A security management system and method for government information data based on big data

Abstract

The present invention relates to the technical field of government information data security management, and specifically to a security management system and method for government information data based on big data. The present invention monitors the storage status parameters of various data storage terminals of government agencies, calculates a transfer pressure index, and compares it in combination with preset double thresholds. When the transfer pressure index exceeds the upper limit, a forced transfer instruction is automatically triggered, and semantic analysis is combined to identify transferable and non-transferable files. The use status evaluation value of the transferable files is further calculated, and the files are divided into positive demand files and non-demand files. The positive demand files are determined to be transmitted to the corresponding demand storage area according to the demand status evaluation value, and the non-demand files are determined to be transmitted to the corresponding important storage area according to the important status evaluation value. At the same time, the transmission of the files to be stored is encrypted and managed, thereby realizing dynamic adjustment and security management of government data and improving resource utilization and data security.

Description

Technical Field

[0001] The present invention relates to the technical field of government information data security management, and specifically to a security management system and method for government information data based on big data. Background Art

[0002] As government services continue to digitize, various departments are accumulating massive amounts of e-government information in areas such as social governance and public services. The scale of data is growing exponentially. Against this backdrop, the traditional government data management model based on static configurations is no longer able to meet complex business needs, exposing a series of prominent problems.

[0003] On the one hand, traditional government information systems are unable to perceive the access frequency and business relevance of government data in real time. As a result, frequently used "hot data" (such as real-time approval documents and public service records) and long-term idle "cold data" (such as historical archived materials) adopt a unified storage strategy. This static management model not only causes inefficient use of core storage resources, but also leads to data write delays, backup interruptions, and even system crashes during peak business periods due to competition for storage space. This directly threatens the continuity of government services and reduces operational stability.

[0004] On the other hand, traditional government information systems still rely on a single encryption method in the data transmission link and fail to build a dynamic security protection system that matches the sensitivity of the data. Faced with increasingly complex network attack methods, static encryption keys can be easily intercepted and cracked, resulting in the risk of leakage and tampering of government data in transmission, exacerbating the instability of the data transmission process.

[0005] In order to solve the above-mentioned defects, a technical solution is now provided. Summary of the Invention

[0006] In response to the above-mentioned shortcomings of the existing technology, the present invention provides a security management system and method for government information data based on big data, which can effectively solve the problems of insufficient dynamic regulation capabilities and transmission security management of government data storage in the existing technology.

[0007] To achieve the above objectives, the present invention can be implemented through the following technical solutions:

[0008] The present invention provides a method for securely managing government information data based on big data, comprising the following steps:

[0009] Monitor the storage status parameters of each government data storage terminal of the target government agency during the current monitoring period, obtain the transfer pressure index of each storage node, compare the transfer pressure index with the preset double threshold interval, and if the transfer pressure index is greater than or equal to the maximum value of the double threshold interval, generate a forced transfer instruction, analyze the content quality of each government document in the current monitoring period, and identify government documents that can be transferred and those that cannot be transferred;

[0010] Then, the usage status parameters of the transferable government documents in the current monitoring period are monitored to obtain the usage status evaluation value of the transferable government documents, and the positive demand files and non-demand files are determined based on the usage status evaluation value;

[0011] Monitor the transaction activity parameters corresponding to the positive demand file to obtain a demand status evaluation value of the positive demand file, generate a primary demand signal or a secondary demand signal based on the demand status evaluation value, and transmit the positive demand file to the corresponding demand storage area;

[0012] Monitor the importance status parameters corresponding to non-demand files to obtain an important status evaluation value of the non-demand files, generate a first-level important signal or a second-level important signal based on the important status evaluation value, and transfer the non-demand files to the corresponding important storage area;

[0013] At the same time, encryption analysis is performed on the file transmission to obtain the encryption character value combination sequence and the encryption number symbol value combination sequence, based on which the encrypted data is determined. The file to be stored refers to the positive demand file and the non-demand file.

[0014] Furthermore, the specific process of solving the transfer pressure index is as follows:

[0015] During the current monitoring period, the core indicators of each storage node of the target government agency are obtained in real time and the core indicator state vector is constructed. ;

[0016] in, Indicates the total number of stored data entries, Indicates the remaining available storage capacity. Indicates the average number of read and write operations per unit time. Indicates the average response delay time of each read and write operation per unit time;

[0017] Normalize the core indicator state vector according to the formula: , and get the transfer pressure index Tc, where a1, a2, a3 and a4 all represent the set weight factors. Indicates the anti-zero safety item, the default value is 1×10 -6 .

[0018] Furthermore, the specific process of solving the government documents that can be transferred and those that cannot be transferred is as follows:

[0019] Obtain various government documents in the storage node of the target government agency during the current monitoring period to form the original data set;

[0020] For each government document, extract its content field and use the word segmentation tool to perform Chinese text segmentation on the content field to generate the corresponding word set;

[0021] The interference word library is introduced to perform denoising on the word sets of various government documents, eliminating all items that match the middle words to generate a purified semantic word set;

[0022] There are three semantic word sets corresponding to the importance levels of government affairs content, namely: the semantic word set of first-level important content, the semantic word set of second-level important content, and the semantic word set of third-level important content;

[0023] Match the purified semantic word set with the three levels of important content semantic word sets mentioned above, and count the matching frequencies in each level of important content semantic word set;

[0024] According to the size relationship of the matching frequencies, the corresponding level with the largest value is selected as the importance level of the government document;

[0025] Government documents that are determined to be first-level important government documents or second-level important government documents will be marked as transferable government documents;

[0026] Government documents that are judged to be third-level important government documents will be marked as government documents that will not be transferred.

[0027] Furthermore, the specific process of solving the usage status evaluation value of the transferable government documents is as follows:

[0028] Obtain the number of accesses, storage duration, and update frequency of government documents that can be transferred to the target government agency storage node during the current monitoring period, and record them as the access frequency value fpz d , storage duration value csz d Sum frequency value hsz d ;

[0029] According to the formula: , and obtain the usage status evaluation value XUZ of the transferable government documents, where d represents the number of each monitoring time point in the current monitoring period, d=1, 2, 3...d * , d * Indicates the total number of monitoring time points in the current monitoring period, fpz * 、csz * and hsz *They represent the reference access frequency value, reference storage duration value and reference update frequency value respectively, Δfpz, Δcsz and Δhsz represent the set allowed access frequency difference, allowed storage duration difference and allowed update frequency difference respectively, λ1, λ2 and λ3 represent the weight coefficients of the access frequency degree value, storage duration degree value and update frequency degree value respectively, and λ1>λ2>λ3.

[0030] Furthermore, the specific process of solving the demand status evaluation value of the positive demand document is as follows:

[0031] By obtaining the response time value sxz, emergency value jdz and impact range value yxz in the active state parameters of the associated transaction corresponding to the positive demand file in the storage node of the target government agency during the current monitoring period, and extracting the values ​​of the three for normalization, according to the formula: , the demand status evaluation value XQP of the positive demand file is obtained, where η1, η2 and η3 represent the weight coefficients of response timeliness value, urgency value and impact range value respectively, and η1>η2>η3.

[0032] Furthermore, the specific process of solving the response time value, emergency value and impact range value is as follows:

[0033] Determine the response timeliness value based on the first completion timestamp and issuance timestamp of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period;

[0034] Determine the emergency value based on the remaining duration and allowed processing time of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period;

[0035] The impact range value is determined based on the total number of business departments affected by the processing results of the associated transactions corresponding to the positive demand files in the target government agency storage node during the current monitoring period.

[0036] Furthermore, the specific process of solving the important status evaluation value of non-demand files is as follows:

[0037] By obtaining the legal retention period remaining value ylz, access role coverage value fjz and privacy coverage value ysz corresponding to the importance status parameters of the non-demand files in the target government agency storage node during the current monitoring period, and extracting the values ​​of the three for normalization, according to the formula: , the important status evaluation value ZYP of non-demand files is obtained, where e represents the set natural constant, η4, η5 and η6 represent the weight coefficients of the remaining value of the legal retention period, the access role coverage value and the privacy coverage value respectively, and η4>η5>η6;

[0038] The remaining value of the legal retention period refers to the remaining time until the end of the legal retention period for the document;

[0039] The access role coverage value refers to the percentage of roles that have access to the file to the total number of roles;

[0040] The privacy coverage value refers to the percentage of private information bytes in the file to the total bytes.

[0041] Furthermore, encryption analysis is performed on the transmission of stored files. The specific analysis process is as follows:

[0042] Identify the text content in the stored file and extract the character and number information;

[0043] a1: A stroke encoding rule library is pre-set, and each stroke type is mapped to a unique stroke value. Subsequently, each extracted character is subjected to stroke structure analysis to identify the type and number of its constituent strokes. For each stroke type, a corresponding weight coefficient is set to characterize the relative importance of the stroke in the character structure. By multiplying each stroke value by its weight coefficient and summing the results, the encrypted character value corresponding to the character is obtained;

[0044] According to the above step a1 rules, all the recognized characters in the storage file are processed in the same way to generate an encrypted character value combination sequence;

[0045] a2: Construct a decimal value sequence from the numeric symbols in their original order of appearance, and perform the following processing on each decimal digit in the decimal value sequence:

[0046] Convert the decimal number to standard binary, and then pad the binary number with zeros on the left according to a preset fixed number of bits to construct a binary matrix of uniform length;

[0047] The binary matrix is ​​expanded bit by bit, specifically: all binary bits are vertically spliced ​​to form a continuous bit string, and then a hash algorithm is used to calculate the bit string to generate a fixed-length hexadecimal hash value. The first A bits of the hash value are intercepted, where A is a preset parameter, and converted to a decimal value as the encryption number value corresponding to the number symbol;

[0048] According to the above step a2 rule, all the recognized digital symbols in the storage file are processed in the same way to generate an encrypted digital symbol value combination sequence.

[0049] Furthermore, the specific process of determining the encrypted data is as follows:

[0050] Substitute the corresponding values ​​in the encrypted character value combination sequence and the encrypted number symbol value combination sequence into a linear equation to calculate and obtain the encrypted conversion value;

[0051] Convert the encrypted conversion value into an encrypted graph. The specific conversion process is as follows:

[0052] A cylinder is set as the encryption carrier, and its central axis along the height direction is divided into an upper cylinder and a lower cylinder;

[0053] Get the total number of digits in the encrypted conversion value. If the total number of digits in the encrypted conversion value is even, divide the total number of digits in the encrypted conversion value by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder. If the total number of digits in the encrypted conversion value is odd, subtract 1 from the total number of digits in the encrypted conversion value and divide it by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value plus 1 as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder;

[0054] According to the number of upper / lower sectors, the cross section of the corresponding cylinder is equally divided into a specified number of sector areas;

[0055] Set 0 to 9 to correspond to a digital pattern, match the corresponding digital patterns with the numbers corresponding to the encrypted conversion values ​​in sequence and print them in the sector area in order to obtain encrypted cylinders, and arrange the encrypted cylinders in order to obtain encrypted data.

[0056] Furthermore, a security management system for government information data based on big data includes:

[0057] The transfer determination module is used to monitor the storage status parameters of each government data storage terminal of the target government agency during the current monitoring period, obtain the transfer pressure index of each storage node, compare the transfer pressure index with a preset double threshold interval, and generate a forced transfer instruction if the transfer pressure index is greater than or equal to the maximum value of the double threshold interval;

[0058] The transfer identification module is used to analyze the content quality of various government documents in the current monitoring period based on the forced transfer instruction, and identify government documents that can be transferred and those that cannot be transferred;

[0059] The transferable usage analysis module is used to monitor the usage status parameters of the transferable government documents in the current monitoring period, obtain the usage status evaluation value of the transferable government documents, and determine the positive demand files and non-demand files based on the usage status evaluation value;

[0060] The positive demand storage analysis module is used to monitor the activity status parameters of the associated transactions corresponding to the positive demand files, obtain the demand status evaluation value of the positive demand files, generate a primary demand signal or a secondary demand signal based on the demand status evaluation value, and transfer the positive demand files to the corresponding demand storage area;

[0061] The non-demand storage analysis module is used to monitor the importance status parameters corresponding to non-demand files, obtain the importance status evaluation value of the non-demand files, generate a first-level importance signal or a second-level importance signal based on the importance status evaluation value, and transfer the non-demand files to the corresponding important storage area;

[0062] The transmission security encryption module is used to perform encryption analysis on the transmission of the stored file, obtain the encryption character value combination sequence and the encryption number symbol value combination sequence, and determine the encrypted data based on this.

[0063] Compared with the prior art, the technical solution provided by the present invention has the following beneficial effects:

[0064] 1. The present invention, by constructing a transfer pressure index and combining it with a dual-threshold adaptive strategy, can automatically trigger a high-priority transfer operation before the storage node reaches the overload critical point, effectively avoiding the problems of storage space shortage, backup delay and data loss that may occur during business peak periods, and ensuring the continuity of government services and the stability of system operation. At the same time, it adopts a multi-level government semantic word set combined with a denoising word segmentation algorithm to perform fine-grained semantic analysis and value recognition on file content, and only performs transfer operations on files that are judged to be first-level or second-level important, thereby achieving accurate distinction between transferable and non-transferable data, greatly improving the accuracy of transfer, and reducing resource waste and error processing risks.

[0065] 2. The present invention further refines the classification of transferable government documents and divides them into positive demand files and non-demand files. For positive demand files, its business urgency and service priority are further evaluated to generate corresponding demand signals, and the files are transferred to the corresponding demand storage areas accordingly, effectively ensuring that core business data has a higher access response speed and security level. At the same time, for non-demand files, its statutory retention period remaining value, access role coverage value and privacy coverage value are comprehensively analyzed to generate corresponding important signals, and the files are transferred to the corresponding important storage areas, which not only realizes the compliance management of low-frequency data, but also improves the overall resource utilization efficiency through differentiated storage strategies, effectively avoiding data resource waste and security risks.

[0066] 3. This invention, by integrating linguistic stroke analysis, cryptographic hash algorithms, and geometric figure partitioning technology, constructs a "semantic-numeric-graphic" triple dynamic encryption system, thereby achieving deep obfuscation of data forms and real-time binding of dynamic keys, breaking through the limitations of traditional single encryption dimensions. BRIEF DESCRIPTION OF THE DRAWINGS

[0067] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0068] Figure 1 It is a flowchart of the overall process of the present invention.

[0069] Figure 2 It is the overall module block diagram of the present invention. DETAILED DESCRIPTION

[0070] To make the purpose, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making any creative efforts shall fall within the scope of protection of the present invention.

[0071] like Figure 1 As shown, a security management method for government information data based on big data includes the following steps:

[0072] Step 1: Monitor the storage status parameters of the government data storage terminal during the current monitoring period to determine whether data transfer is required. The specific operation process is as follows:

[0073] During the current monitoring period, the core indicators of each storage node of the target government agency are obtained in real time and the core indicator state vector is constructed. ;

[0074] in, Indicates the total number of stored data entries, reflecting the current storage load. The larger the value, the more accumulated data. It can be used to determine whether the preset storage limit has been reached. Indicates the remaining available storage capacity, which is used to measure the degree of storage space tension. The smaller the remaining capacity, the more urgent the transfer demand. Indicates the average number of read and write operations per unit time (one hour in this case), which is used to measure the current access load pressure. The larger the value, the higher the read and write activity. The average response latency of each read and write operation within a unit of time (one hour in this case). This value reflects response performance. Increased latency may indicate an impending overload or bottleneck.

[0075] Normalize the core indicator state vector according to the formula: , the transfer pressure index Tc is obtained, where a1, a2, a3, and a4 all represent set weight factors, represents the anti-zero safety term, with a default value of 1×10 -6 ;

[0076] Set the double-threshold interval , and compare the transfer pressure index Tc of each storage node of the target government agency with the double-threshold interval ;

[0077] If the transfer pressure index Tc of a certain storage node of the target government agency is ≥ T high , a forced transfer instruction is immediately generated, and step two is executed;

[0078] If T low ≤ the transfer pressure index Tc of a certain storage node of the target government agency < T high , it is written into the candidate transfer queue and waits for the next cycle of review;

[0079] If the transfer pressure index Tc of a certain storage node of the target government agency < T low , the current situation is maintained and this cycle ends.

[0080] Step two: Analyze the content quality of each government document in the current monitoring period, identify transferable government documents and non-transferable government documents, and the specific operation process is as follows:

[0081] Obtain each government document in the storage node of the target government agency during the current monitoring period to form an original data set , where D i represents the i-th government document, and m is the total number of government documents in the current monitoring period;

[0082] For each government document, extract its content fields, such as title, text, abstract, etc., and use a word segmentation tool (such as Jieba, THULAC or a custom word segmentation model) to perform Chinese text word segmentation on this content field to generate a corresponding set of words: , where w ij represents the j-th word in the i-th document, and n represents the total number of words in this government document;

[0083] Introduce the set interference word library , which contains a set of stop words such as "of, this, hello everyone, therefore" that have no semantic load;

[0084] Perform noise reduction processing on the set of words of each government document, and剔除 all items that match the words in the middle to generate a purified semantic word set ;

[0085] The semantic word sets corresponding to the three levels of importance of government affairs content are preset, namely:

[0086] First-level important content semantic word set (such as core notice, personnel change, etc.);

[0087] Secondary important content semantic word set (such as summary, data submission, information filing, approval form, etc.);

[0088] Level 3 semantic word set of important content (such as regular meeting minutes, daily reports, announcement reminders, etc.);

[0089] The purified semantic word set , respectively matched with the above three levels of important content semantic word sets, and counted the matching frequency count in each level of important content semantic word sets ki , the specific expression is: , k=1, 2, 3, k represents the number of important semantic word sets at each level, A k Represents the k-th level important content semantic word set;

[0090] According to the matching frequency count ki The order of importance of the government document is selected according to the relationship between the order of magnitude and the order of importance of the government document.

[0091] If count 1i Maximum, then D i Determined to be a first-level important government document;

[0092] If count 2i Maximum, then D i Determined to be a Level 2 important government document;

[0093] If count 3i Maximum, then D i Determined to be a Level 3 important government document;

[0094] Government documents that are determined to be first-level important government documents or second-level important government documents will be marked as transferable government documents;

[0095] Government documents that are determined to be Level 3 important government documents will be marked as government documents that will not be transferred;

[0096] Step 3: Monitor the usage status parameters of the government documents that can be transferred to the target government agency storage node during the current monitoring period, and thereby determine and analyze the usage status of the government documents that can be transferred to the target government agency storage node during the current monitoring period. The specific operation process is as follows:

[0097] The number of accesses to the government documents that can be transferred to the storage node of the target government agency during the current monitoring period is obtained, and recorded as the access frequency value fpz d ;

[0098] By obtaining the storage duration of the government documents that can be transferred in the target government agency storage node during the current monitoring period, the storage duration of the government documents that can be transferred in the target government agency storage node during the current monitoring period is obtained and recorded as the storage duration value csz d ;

[0099] The update frequency of the government documents that can be transferred to the storage node of the target government agency during the current monitoring period is obtained by obtaining the update frequency of the government documents that can be transferred to the storage node of the target government agency during the current monitoring period, and it is recorded as the update frequency value hsz d ;

[0100] According to the formula: , and obtain the usage status evaluation value XUZ of the transferable government documents, where d represents the number of each monitoring time point in the current monitoring period, d=1, 2, 3...d * , d * Indicates the total number of monitoring time points in the current monitoring period, fpz * 、csz * and hsz * They represent the reference access frequency value, reference storage duration value, and reference update frequency value, respectively. Δfpz, Δcsz, and Δhsz represent the set allowable access frequency difference, allowable storage duration difference, and allowable update frequency difference, respectively. λ1, λ2, and λ3 represent the weight coefficients of the access frequency degree value, storage duration degree value, and update frequency degree value, respectively. λ1>λ2>λ3. The weight coefficients are used to balance the proportion of each data in the formula calculation, thereby improving the accuracy of the calculation results.

[0101] Compare and analyze the usage demand value of transferable government documents with the preset usage demand threshold;

[0102] If the usage demand value of the transferable government document is greater than or equal to the preset usage demand threshold, the transferable government document is determined to be a positive demand file, and step 4 is executed; if the usage demand value of the transferable government document is less than the preset usage demand threshold, the transferable government document is determined to be a non-demand file, and step 5 is executed;

[0103] Step 4: Monitor the transaction activity parameters corresponding to the files in demand within the target government agency storage node during the current monitoring period, and analyze the demand level of the files in demand within the target government agency storage node during the current monitoring period. The specific operation process is as follows:

[0104] By obtaining the first completion timestamp su and the issuance timestamp sx of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period, according to the formula: , we get the response time value sxz, which reflects the agility of transaction processing. The smaller the value, the faster the transaction response requirement. Among them, sz represents the total number of associated transactions in the current monitoring period;

[0105] By obtaining the remaining time T of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period 剩余 (i.e. the distance between the current time and the deadline) and the allowed processing time T 总 , according to the formula: , we get the urgency value jdz, which reflects the urgency of the associated transaction processing time limit;

[0106] Obtain the impact range value yxz by obtaining the total number of business departments affected by the processing results of the associated transactions corresponding to the positive demand files in the target government agency storage node during the current monitoring period;

[0107] According to the formula: , the demand status evaluation value XQP of the positive demand file is obtained. The larger the demand status evaluation value XQP is, the higher the business importance of the positive demand file in the current monitoring period, and its stable storage and high-speed access should be prioritized. Among them, η1, η2 and η3 represent the weight coefficients of the response timeliness value, the urgency value and the impact range value, respectively, and η1>η2>η3. The weight coefficient is used to balance the proportion of each data in the formula calculation, thereby promoting the accuracy of the calculation result.

[0108] Step 5: Monitor the importance status parameters corresponding to the non-demand files in the target government agency storage node during the current monitoring period, and analyze and process the importance of the non-demand files in the target government agency storage node during the current monitoring period. The specific operation process is as follows:

[0109] By obtaining the remaining value of the legal retention period, access role coverage value, and privacy coverage value in the importance status parameters corresponding to the non-demand files in the target government agency storage node during the current monitoring period, the remaining value of the legal retention period, access role coverage value, and privacy coverage value corresponding to the non-demand files in the target government agency storage node during the current monitoring period are obtained and marked as ylz, fjz, and ysz respectively. The values ​​of the three are extracted and normalized according to the formula: , the important status evaluation value ZYP of non-demand files is obtained, where e represents the set natural constant, η4, η5 and η6 represent the weight coefficients of the remaining value of the legal retention period, the access role coverage value and the privacy coverage value respectively, and η4>η5>η6;

[0110] The remaining value of the legal retention period refers to the remaining time of the document until the end of the legal retention period;

[0111] The access role coverage value refers to the percentage of roles that have access to the file to the total number of roles;

[0112] The privacy coverage value refers to the percentage of private information bytes in the file to the total bytes.

[0113] Step 6: Match the corresponding storage area based on the demand status evaluation value of the positive demand file and the important status evaluation value of the non-demand file. The specific matching process is as follows:

[0114] Setting a demand state evaluation threshold for the positive demand document, comparing and analyzing the demand state evaluation value of the positive demand document with the preset demand state evaluation threshold, generating a primary demand signal when the demand state evaluation value of the positive demand document is greater than or equal to the preset demand state evaluation threshold, and generating a secondary demand signal when the demand state evaluation value of the positive demand document is less than the preset demand state evaluation threshold;

[0115] If a first-level demand signal is captured, the positive demand file in the target government agency storage node during the current monitoring period will be transferred to the first-level demand storage area to facilitate efficient user access and immediate call, improve the processing efficiency and responsiveness of government affairs, and ensure data security, continuity and integrity through high-speed storage and real-time backup mechanisms;

[0116] Similarly, if a secondary demand signal is captured, the positive demand file in the target government agency storage node during the current monitoring period will be transferred to the secondary demand storage area, facilitating medium and low-frequency access and hierarchical management, achieving resource optimization and long-term orderly storage of government data, and improving the scalability and management efficiency of the overall storage system while ensuring basic availability;

[0117] Setting an important status assessment threshold for non-requirement files, comparing and analyzing the important status assessment value of the non-requirement files with the important status assessment threshold; when the important status assessment value of the non-requirement files is greater than or equal to the preset important status assessment threshold, a first-level important signal is generated; when the important status assessment value of the non-requirement files is less than the preset important status assessment threshold, a second-level important signal is generated;

[0118] If a first-level important signal is captured, the non-demand files in the target government agency storage node during the current monitoring period will be transferred to the first-level important storage area;

[0119] If a secondary important signal is captured, the non-demand files in the target government agency storage node during the current monitoring period will be transferred to the secondary important storage area;

[0120] Among them, non-demand files with a higher degree of importance are stored in the first-level important storage area to ensure the security and availability of their data, while non-demand files with a lower degree of importance are stored in the second-level important storage area, providing users with more flexible and efficient storage options.

[0121] Step Seven: Conduct encryption analysis on the files to be stored. The specific encryption process is as follows:

[0122] Identify the text content in the files to be stored, and extract the character and numerical symbol information therein. Among them, the "character" mainly refers to Chinese characters, and the "numerical symbol" refers to Arabic numerals appearing in the file. The files to be stored refer to positive demand files and non-demand files;

[0123] a1: To achieve the structural numerical conversion of characters, a set of stroke coding rule libraries is preset in advance, and each stroke type corresponds to a unique stroke value. For example: the stroke value of a horizontal stroke is 1, the stroke value of a vertical stroke is 2, the stroke value of a left-falling stroke is 3, the stroke value of a right-falling stroke is 4, the stroke value of a turning stroke is 5, and the stroke value of a dot stroke is 6;

[0124] Subsequently, conduct stroke structure analysis on each extracted character to identify the type and quantity of its constituent strokes. For each stroke type, a corresponding weight coefficient is set to depict the relative importance of the stroke in the character structure. By multiplying each stroke value by its weight coefficient and summing the results, the encrypted character numerical value corresponding to the character is obtained; <o000332>

[0125] For example, in an example, the character "文" consists of four strokes: "dot, horizontal, left-falling, right-falling", and the corresponding stroke values are 6, 1, 3, and 4 respectively. If the weight coefficients corresponding to "dot, horizontal, left-falling, right-falling" are set to 0.5, 2, 1, and 1.5 respectively, the numerical calculation process of this character is: ;

[0126] According to the rules of step a1 above, perform the same processing on all identified characters in the files to be stored in sequence, and finally generate a complete encrypted character numerical value combination sequence as the input basis for subsequent encryption steps;

[0127] a2: Construct a decimal numerical value sequence by arranging the numerical symbols in the original order of appearance, and perform the following processing on each decimal number in the decimal numerical value sequence:

[0128] Convert the decimal number to standard binary, and then perform left zero-padding on the binary number according to a preset fixed number of bits (such as 8 bits) to construct a binary matrix with a unified length;

[0129] Expand the binary matrix bit by bit, specifically by vertically concatenating all binary bits to form a continuous bit string. A hash algorithm (such as SHA-256 or MD5) is then used to calculate the bit string to generate a fixed-length hexadecimal hash value. The first A bits (A is a preset parameter, such as 6 bits) of the hash value are converted to a decimal value, which is used as the encrypted number symbol value corresponding to the number symbol.

[0130] For example, in one example, the number of job openings is 123, so the extracted decimal sequence is , convert the decimal sequence into a binary matrix bit , vertically concatenate all binary bits to form a continuous bit string 000000010000001000000011, and then use the hash algorithm SHA-256 to calculate the result as 2C26B46B68FFC68FF99B453C1D30413413422D706483BFA0F98A5E886266E7AE; and then cut off the first 8 bits 2C26B46B and convert it into a decimal value 740952331, thus obtaining the encrypted value of the number of job admissions 123 as 740952331;

[0131] Following the rules of step a2 above, all the recognized numeric symbols in the stored file are processed in the same way, and finally a complete encrypted numeric symbol combination sequence is generated, which serves as the input basis for the subsequent encryption steps;

[0132] Substitute the corresponding value X in the encrypted character value combination sequence and the encrypted number symbol value combination sequence into the linear equation formula: , obtaining the encrypted conversion value Y, wherein the coefficient Q and constant E of the linear equation are dynamically set by those skilled in the art according to the encryption strength requirements;

[0133] Convert the encrypted conversion value into an encrypted graph. The specific conversion process is as follows:

[0134] A cylinder is set as the encryption carrier, and its central axis along the height direction is divided into an upper cylinder and a lower cylinder;

[0135] Get the total number of digits in the encrypted conversion value. If the total number of digits in the encrypted conversion value is even, divide the total number of digits in the encrypted conversion value by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder. If the total number of digits in the encrypted conversion value is odd, subtract 1 from the total number of digits in the encrypted conversion value and divide it by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value plus 1 as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder;

[0136] According to the number of upper / lower sectors, the cross section of the corresponding cylinder is equally divided into a specified number of sector areas;

[0137] For example, in one example, the encrypted conversion value is 47682939, the total number of digits of the encrypted conversion value is 8, and the number of division digits is 4. Therefore, the number of sectors divided into the upper cylinder is 4, and the number of sectors divided into the lower cylinder is 4. According to the upper / lower sector number 4, the cross section of the corresponding cylinder is equally divided into 4 sector areas;

[0138] Set 0 to 9 to correspond to a digital pattern, match the corresponding digital patterns with the numbers corresponding to the encrypted conversion values ​​in sequence and print them in the sector area in order to obtain encrypted cylinders, and arrange the encrypted cylinders in order to obtain encrypted data.

[0139] like Figure 2 As shown, a security management system for government information data based on big data includes: a transfer determination module, a transfer identification module, a transferable use analysis module, a positive demand storage analysis module, a non-demand storage analysis module and a transmission security encryption module;

[0140] The transfer determination module is used to monitor the storage status parameters of each government data storage terminal of the target government agency during the current monitoring period, obtain the transfer pressure index of each storage node, compare the transfer pressure index with the preset double threshold interval, and if the transfer pressure index is greater than or equal to the maximum value of the double threshold interval, generate a forced transfer instruction and execute the transfer identification module;

[0141] The specific process of solving the transfer pressure index is as follows:

[0142] During the current monitoring period, the core indicators of each storage node of the target government agency are obtained in real time and the core indicator state vector is constructed. ;

[0143] in, Indicates the total number of stored data entries, reflecting the current storage load. The larger the value, the more accumulated data. It can be used to determine whether the preset storage limit has been reached. Indicates the remaining available storage capacity, which is used to measure the degree of storage space tension. The smaller the remaining capacity, the more urgent the transfer demand. Indicates the average number of read and write operations per unit time (one hour in this case), which is used to measure the current access load pressure. The larger the value, the higher the read and write activity. The average response latency of each read and write operation within a unit of time (one hour in this case). This value reflects response performance. Increased latency may indicate an impending overload or bottleneck.

[0144] Normalize the core indicator state vector according to the formula: , and get the transfer pressure index Tc, where a1, a2, a3 and a4 all represent the set weight factors. Indicates the anti-zero safety item, the default value is 1×10 -6 .

[0145] The transfer identification module is used to analyze the content quality of various government documents during the current monitoring period and identify government documents that can be transferred and those that cannot be transferred. The specific identification and analysis process is as follows:

[0146] Obtain various government documents in the storage node of the target government agency during the current monitoring period to form the original data set;

[0147] For each government document, extract its content field and use the word segmentation tool to perform Chinese text segmentation on the content field to generate the corresponding word set;

[0148] The interference word library is introduced to perform denoising on the word sets of various government documents, eliminating all items that match the middle words to generate a purified semantic word set;

[0149] There are three semantic word sets corresponding to the importance levels of government affairs content, namely: the semantic word set of first-level important content, the semantic word set of second-level important content, and the semantic word set of third-level important content;

[0150] Match the purified semantic word set with the three levels of important content semantic word sets mentioned above, and count the matching frequencies in each level of important content semantic word set;

[0151] According to the size relationship of the matching frequencies, the corresponding level with the largest value is selected as the importance level of the government document;

[0152] Government documents that are determined to be first-level important government documents or second-level important government documents will be marked as transferable government documents;

[0153] Government documents that are judged to be third-level important government documents will be marked as government documents that will not be transferred.

[0154] The transferable usage analysis module is used to monitor the usage status parameters of transferable government documents during the current monitoring period, obtain the usage status evaluation value of the transferable government documents, and determine the positive demand files and non-need files based on the usage status evaluation value. The specific analysis process is as follows:

[0155] Obtain the number of accesses, storage duration, and update frequency of government documents that can be transferred to the target government agency storage node during the current monitoring period, and record them as the access frequency value fpz d , storage duration value csz d Sum frequency value hsz d ;

[0156] According to the formula: , and obtain the usage status evaluation value XUZ of the transferable government documents, where d represents the number of each monitoring time point in the current monitoring period, d=1, 2, 3...d * , d * Indicates the total number of monitoring time points in the current monitoring period, fpz * 、csz * and hsz * denote the reference access frequency value, reference storage duration value and reference update frequency value respectively; Δfpz, Δcsz and Δhsz denote the set allowable access frequency difference, allowable storage duration difference and allowable update frequency difference respectively; λ1, λ2 and λ3 denote the weight coefficients of the access frequency degree value, storage duration degree value and update frequency degree value respectively, and λ1>λ2>λ3;

[0157] Compare and analyze the usage demand value of transferable government documents with the preset usage demand threshold;

[0158] If the usage demand value of the transferable government affairs file is greater than or equal to the preset usage demand threshold, the transferable government affairs file will be judged as a positive demand file and the positive demand storage analysis module will be executed. If the usage demand value of the transferable government affairs file is less than the preset usage demand threshold, the transferable government affairs file will be judged as a non-demand file and the non-demand storage analysis module will be executed.

[0159] The positive demand storage analysis module is used to monitor the active state parameters of the associated transactions corresponding to the positive demand files, analyze and obtain the demand state evaluation value of the positive demand files, and generate a primary demand signal or a secondary demand signal based on the demand state evaluation value;

[0160] If a primary demand signal is captured, the positive demand file is transferred to the primary demand storage area; if a secondary demand signal is captured, the positive demand file is transferred to the secondary demand storage area;

[0161] The specific process of solving the demand state evaluation value is as follows:

[0162] By obtaining the first completion timestamp su and the issuance timestamp sx of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period, according to the formula: , we get the response time value sxz, which reflects the agility of transaction processing. The smaller the value, the faster the transaction response requirement. Among them, sz represents the total number of associated transactions in the current monitoring period;

[0163] By obtaining the remaining time T of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period 剩余 (i.e. the distance between the current time and the deadline) and the allowed processing time T 总, according to the formula: , we get the urgency value jdz, which reflects the urgency of the associated transaction processing time limit;

[0164] Obtain the impact range value yxz by obtaining the total number of business departments affected by the processing results of the associated transactions corresponding to the positive demand files in the target government agency storage node during the current monitoring period;

[0165] According to the formula: , the demand status evaluation value XQP of the positive demand file is obtained. The larger the demand status evaluation value XQP is, the higher the business importance of the positive demand file in the current monitoring period, and its stable storage and high-speed access should be prioritized. Among them, η1, η2 and η3 represent the weight coefficients of the response timeliness value, urgency value and impact range value, respectively, and η1>η2>η3.

[0166] The non-demand storage analysis module is used to monitor the importance status parameters corresponding to non-demand files, analyze and obtain the importance status evaluation value of the non-demand files, and generate a first-level important signal or a second-level important signal based on the important status evaluation value;

[0167] If a first-level important signal is captured, the non-required files are transferred to the first-level important storage area. If a second-level important signal is captured, the non-required files are transferred to the second-level important storage area.

[0168] The specific process of solving the important state evaluation value is as follows:

[0169] By obtaining the remaining value of the legal retention period, access role coverage value, and privacy coverage value in the importance status parameters corresponding to the non-demand files in the target government agency storage node during the current monitoring period, the remaining value of the legal retention period, access role coverage value, and privacy coverage value corresponding to the non-demand files in the target government agency storage node during the current monitoring period are obtained and marked as ylz, fjz, and ysz respectively. The values ​​of the three are extracted and normalized according to the formula: , the important status evaluation value ZYP of non-demand files is obtained, where e represents the set natural constant, η4, η5 and η6 represent the weight coefficients of the remaining value of the legal retention period, the access role coverage value and the privacy coverage value respectively, and η4>η5>η6;

[0170] The remaining value of the legal retention period refers to the remaining time until the end of the legal retention period for the document;

[0171] The access role coverage value refers to the percentage of roles that have access to the file to the total number of roles;

[0172] The privacy coverage value refers to the percentage of private information bytes in the file to the total bytes.

[0173] The transmission security encryption module is used to perform encryption analysis on the transmission of stored files. The specific encryption process is as follows:

[0174] Identify the text content in the file to be stored and extract the character and number information therein, where "characters" mainly refer to Chinese characters and "numbers" refer to Arabic numerals appearing in the file. The file to be stored refers to the requested file and the non-required file;

[0175] a1: To achieve structural numerical conversion of characters, a set of stroke encoding rule libraries is pre-set to correspond each stroke type to a unique stroke value;

[0176] Then, the stroke structure of each extracted character is analyzed to identify the type and number of its constituent strokes. For each stroke type, a corresponding weight coefficient is set to characterize the relative importance of the stroke in the character structure. By multiplying each stroke value by its weight coefficient and summing the results, the encrypted character value corresponding to the character is obtained;

[0177] According to the rules of step a1 above, all recognized characters in the storage file are processed in the same way in sequence, and finally a complete encrypted character value combination sequence is generated as the input basis for the subsequent encryption steps;

[0178] a2: Construct a decimal value sequence from the numeric symbols in their original order of appearance, and perform the following processing on each decimal digit in the decimal value sequence:

[0179] Convert the decimal number to standard binary, and then pad the binary number with zeros on the left according to a preset fixed number of bits (such as 8 bits) to construct a binary matrix of uniform length;

[0180] Expand the binary matrix bit by bit, specifically by vertically concatenating all binary bits to form a continuous bit string. A hash algorithm (such as SHA-256 or MD5) is then used to calculate the bit string to generate a fixed-length hexadecimal hash value. The first A bits (A is a preset parameter, such as 6 bits) of the hash value are converted to a decimal value, which is used as the encrypted number symbol value corresponding to the number symbol.

[0181] Following the rules of step a2 above, all the recognized numeric symbols in the stored file are processed in the same way, and finally a complete encrypted numeric symbol combination sequence is generated, which serves as the input basis for the subsequent encryption steps;

[0182] Substitute the corresponding value X in the encrypted character value combination sequence and the encrypted number symbol value combination sequence into the linear equation formula: , obtaining the encrypted conversion value Y, wherein the coefficient Q and constant E of the linear equation are dynamically set by those skilled in the art according to the encryption strength requirements;

[0183] Convert the encrypted conversion value into an encrypted graph. The specific conversion process is as follows:

[0184] A cylinder is set as the encryption carrier, and its central axis along the height direction is divided into an upper cylinder and a lower cylinder;

[0185] Get the total number of digits in the encrypted conversion value. If the total number of digits in the encrypted conversion value is even, divide the total number of digits in the encrypted conversion value by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder. If the total number of digits in the encrypted conversion value is odd, subtract 1 from the total number of digits in the encrypted conversion value and divide it by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value plus 1 as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder;

[0186] According to the number of upper / lower sectors, the cross section of the corresponding cylinder is equally divided into a specified number of sector areas;

[0187] Set 0 to 9 to correspond to a digital pattern, match the corresponding digital patterns with the numbers corresponding to the encrypted conversion values ​​in sequence and print them in the sector area in order to obtain encrypted cylinders, and arrange the encrypted cylinders in order to obtain encrypted data.

[0188] The preferred embodiments of the present invention disclosed above are intended only to help illustrate the present invention. These preferred embodiments do not exhaustively describe all details, nor do they limit the present invention to specific embodiments. Obviously, many modifications and variations are possible based on the contents of this specification. These embodiments are selected and described in detail in this specification to better explain the principles and practical applications of the present invention, thereby enabling those skilled in the art to better understand and utilize the present invention. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. A security management method for government information data based on big data, characterized in that: The following steps are involved: Monitor the storage status parameters of each government data storage terminal of the target government agency during the current monitoring period, obtain the transfer pressure index of each storage node, compare the transfer pressure index with the preset double threshold interval, and if the transfer pressure index is greater than or equal to the maximum value of the double threshold interval, generate a forced transfer instruction, analyze the content quality of each government document in the current monitoring period, and identify government documents that can be transferred and those that cannot be transferred; Then, the usage status parameters of the transferable government documents in the current monitoring period are monitored to obtain the usage status evaluation value of the transferable government documents, and the positive demand files and non-demand files are determined based on the usage status evaluation value; Monitor the transaction activity parameters corresponding to the positive demand file to obtain a demand status evaluation value of the positive demand file, generate a primary demand signal or a secondary demand signal based on the demand status evaluation value, and transmit the positive demand file to the corresponding demand storage area; Monitor the importance status parameters corresponding to non-demand files to obtain an important status evaluation value of the non-demand files, generate a first-level important signal or a second-level important signal based on the important status evaluation value, and transfer the non-demand files to the corresponding important storage area; At the same time, encryption analysis is performed on the file transmission to obtain the encryption character value combination sequence and the encryption number symbol value combination sequence, based on which the encrypted data is determined. The file to be stored refers to the positive demand file and the non-demand file.

2. A method for secure management of government information data based on big data according to claim 1, characterized in that: The specific process of solving the transfer pressure index is: During the current monitoring period, the core indicators of each storage node of the target government agency are obtained in real time and the core indicator state vector is constructed. ; in, Indicates the total number of stored data entries, Indicates the remaining available storage capacity. Indicates the average number of read and write operations per unit time. Indicates the average response delay time of each read and write operation per unit time; Normalize the core indicator state vector according to the formula: , and get the transfer pressure index Tc, where a1, a2, a3 and a4 all represent the set weight factors. Indicates the anti-zero safety item, the default value is 1×10 -6 .

3. A method for secure management of government information data based on big data according to claim 1, characterized in that: The specific process of solving the government documents that can be transferred and those that cannot be transferred is as follows: Obtain various government documents in the storage node of the target government agency during the current monitoring period to form the original data set; For each government document, extract its content field and use the word segmentation tool to perform Chinese text segmentation on the content field to generate a corresponding word set; The interference word library is introduced to perform denoising on the word set of each government document, eliminating all items that match the middle words to generate a purified semantic word set; There are three semantic word sets corresponding to the importance levels of government affairs content, namely: the semantic word set of first-level important content, the semantic word set of second-level important content, and the semantic word set of third-level important content; Match the purified semantic word set with the three levels of important content semantic word sets mentioned above, and count the matching frequencies in each level of important content semantic word set; According to the size relationship of the matching frequencies, the corresponding level with the largest value is selected as the importance level of the government document; Government documents that are determined to be first-level important government documents or second-level important government documents will be marked as transferable government documents; Government documents that are judged to be third-level important government documents will be marked as government documents that will not be transferred.

4. A method for secure management of government information data based on big data according to claim 1, characterized in that: The specific process of solving the usage status evaluation value of transferable government documents is as follows: Obtain the number of accesses, storage duration, and update frequency of government documents that can be transferred to the target government agency storage node during the current monitoring period, and record them as the access frequency value fpz d , storage duration value csz d Sum frequency value hsz d ; According to the formula: , and obtain the usage status evaluation value XUZ of the transferable government documents, where d represents the number of each monitoring time point in the current monitoring period, d=1, 2, 3...d * , d * Indicates the total number of monitoring time points in the current monitoring period, fpz * 、csz * and hsz * They represent the reference access frequency value, reference storage duration value and reference update frequency value respectively, Δfpz, Δcsz and Δhsz represent the set allowed access frequency difference, allowed storage duration difference and allowed update frequency difference respectively, λ1, λ2 and λ3 represent the weight coefficients of the access frequency degree value, storage duration degree value and update frequency degree value respectively, and λ1>λ2>λ3.

5. The method for secure management of government information data based on big data according to claim 1, characterized in that: The specific process of solving the demand status evaluation value of the positive demand document is: By obtaining the response time value sxz, emergency value jdz and impact range value yxz in the active state parameters of the associated transaction corresponding to the positive demand file in the storage node of the target government agency during the current monitoring period, and extracting the values ​​of the three for normalization, according to the formula: , the demand status evaluation value XQP of the positive demand file is obtained, where η1, η2 and η3 represent the weight coefficients of response timeliness value, urgency value and impact range value respectively, and η1>η2>η3.

6. A method for secure management of government information data based on big data according to claim 5, characterized in that: The specific process of solving the response time value, emergency value and impact range value is as follows: Determine the response timeliness value based on the first completion timestamp and issuance timestamp of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period; Determine the emergency value based on the remaining duration and allowed processing time of the associated transaction corresponding to the positive demand file in the target government agency storage node during the current monitoring period; The impact range value is determined based on the total number of business departments affected by the processing results of the associated transactions corresponding to the positive demand files in the target government agency storage node during the current monitoring period.

7. The method for secure management of government information data based on big data according to claim 1, characterized in that: The specific process of solving the important status evaluation value of non-demand files is as follows: By obtaining the legal retention period remaining value ylz, access role coverage value fjz and privacy coverage value ysz corresponding to the importance status parameters of the non-demand files in the target government agency storage node during the current monitoring period, and extracting the values ​​of the three for normalization, according to the formula: , the important status evaluation value ZYP of non-demand files is obtained, where e represents the set natural constant, η4, η5 and η6 represent the weight coefficients of the remaining value of the legal retention period, the access role coverage value and the privacy coverage value respectively, and η4>η5>η6; The remaining value of the legal retention period refers to the remaining time until the end of the legal retention period for the document; The access role coverage value refers to the percentage of roles that have access to the file to the total number of roles; The privacy coverage value refers to the percentage of private information bytes in the file to the total bytes.

8. The method for secure management of government information data based on big data according to claim 1, characterized in that: Perform encryption analysis on the transmission of stored files. The specific analysis process is as follows: Identify the text content in the stored file and extract the character and number information; a1: A stroke encoding rule library is pre-set, and each stroke type is mapped to a unique stroke value. Subsequently, each extracted character is subjected to stroke structure analysis to identify the type and number of its constituent strokes. For each stroke type, a corresponding weight coefficient is set to characterize the relative importance of the stroke in the character structure. By multiplying each stroke value by its weight coefficient and summing the results, the encrypted character value corresponding to the character is obtained; According to the above step a1 rules, all the recognized characters in the storage file are processed in the same way to generate an encrypted character value combination sequence; a2: Construct a decimal value sequence from the numeric symbols in their original order of appearance, and perform the following processing on each decimal digit in the decimal value sequence: Convert the decimal number to standard binary, and then pad the binary number with zeros on the left according to a preset fixed number of bits to construct a binary matrix of uniform length; The binary matrix is ​​expanded bit by bit, specifically: all binary bits are vertically spliced ​​to form a continuous bit string, and then a hash algorithm is used to calculate the bit string to generate a fixed-length hexadecimal hash value. The first A bits of the hash value are intercepted, where A is a preset parameter, and converted to a decimal value as the encryption number value corresponding to the number symbol; According to the above step a2 rule, all the recognized digital symbols in the storage file are processed in the same way to generate an encrypted digital symbol value combination sequence.

9. The method for secure management of government information data based on big data according to claim 1, characterized in that: The specific process of determining encrypted data is: Substitute the corresponding values ​​in the encrypted character value combination sequence and the encrypted number symbol value combination sequence into a linear equation to calculate and obtain the encrypted conversion value; Convert the encrypted conversion value into an encrypted graph. The specific conversion process is as follows: A cylinder is set as the encryption carrier, and its central axis along the height direction is divided into an upper cylinder and a lower cylinder; Get the total number of digits in the encrypted conversion value. If the total number of digits in the encrypted conversion value is even, divide the total number of digits in the encrypted conversion value by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder. If the total number of digits in the encrypted conversion value is odd, subtract 1 from the total number of digits in the encrypted conversion value and divide it by 2 to get the split digit value. Use the number from the right digit of the encrypted conversion value to the split digit value plus 1 as the number of sectors divided into the upper cylinder, and use the remaining digits as the number of sectors divided into the lower cylinder; According to the number of upper / lower sectors, the cross section of the corresponding cylinder is equally divided into a specified number of sector areas; Set 0 to 9 to correspond to a digital pattern, match the corresponding digital patterns with the numbers corresponding to the encrypted conversion values ​​in sequence and print them in the sector area in order to obtain encrypted cylinders, and arrange the encrypted cylinders in order to obtain encrypted data.

10. A security management system for government information data based on big data, applied to the security management method for government information data based on big data according to claim 1, characterized in that: include: The transfer determination module is used to monitor the storage status parameters of each government data storage terminal of the target government agency during the current monitoring period, obtain the transfer pressure index of each storage node, compare the transfer pressure index with a preset double threshold interval, and generate a forced transfer instruction if the transfer pressure index is greater than or equal to the maximum value of the double threshold interval; The transfer identification module is used to analyze the content quality of various government documents in the current monitoring period based on the forced transfer instruction, and identify government documents that can be transferred and those that cannot be transferred; The transferable usage analysis module is used to monitor the usage status parameters of the transferable government documents in the current monitoring period, obtain the usage status evaluation value of the transferable government documents, and determine the positive demand files and non-demand files based on the usage status evaluation value; The positive demand storage analysis module is used to monitor the activity status parameters of the associated transactions corresponding to the positive demand files, obtain the demand status evaluation value of the positive demand files, generate a primary demand signal or a secondary demand signal based on the demand status evaluation value, and transfer the positive demand files to the corresponding demand storage area; The non-demand storage analysis module is used to monitor the importance status parameters corresponding to non-demand files, obtain the importance status evaluation value of the non-demand files, generate a first-level importance signal or a second-level importance signal based on the importance status evaluation value, and transfer the non-demand files to the corresponding important storage area; The transmission security encryption module is used to perform encryption analysis on the transmission of the stored file, obtain the encryption character value combination sequence and the encryption number symbol value combination sequence, and determine the encrypted data based on this.

Images